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AMENDMENTS TO THE SPECIFICATION: 

Please replace the paragraph beginning on page 10, line 20 and ending on 
page 10, line 29, with the following amended paragraph: 

In yet another aspect of Applicants' invention, a CSS for providing accurate 
and timely status indications of authentication certificates issued by issuing CAs 
includes providing a status of an authentication certificate as indicated by a CRL 
when the certificate's issuing CA uses CRLs for indicating status. Otherwise, the 
status as indicated by a cache memory when the cache memory includes a status 
and a time-to- 25-live data element is not exceeded is provided. If the time-to-live 
data element is exceeded, the status is cleared from the cache memory, and the 
status is requested and retrieved using a real-time certificate status reporting 
protocol when the status is not in the cache memory. At least the certificate's 
identification, status, and time-to-live data element are added to the cache memory, 
and the retrieved status is provided. 

Please replace the paragraph beginning on page 11, line 4 and ending on 
page 11, line 8, with the following amended paragraph: 

When a request is made to the CSS to retrieve a status of a new certificate 
and the cache memory has reached an allocated buffer size limit, the CSS searches 
the cache memory for a teste d last -accessed data element indicating an oldest date 
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and clears the respective cache memory entry; and the CSS then retrieves the 
requested status, places it in the cache memory, and provides the requested status. 

Please replace the paragraph beginning on page 34, line 28 and ending on 
page 35, line 2, with the following amended paragraph: 

If a request is made to the CSS to retrieve certificate status for a new 
certificate and the issuing CA cache has reached its allocated buffer size limit, the 
certificate status last-accessed data element may be added to the certificated status 
entry in the CSS's issuing CA cache. The CSS searches the issuing CA cache for 
the lates t last -accessed data element with fef the oldest date (least-frequently-used) 
and clears that entry. The CSS then retrieves the requested certificates status, 
places it in the freed location in the issuing CA cache and reports the status to the 
system or trusted third-party repository of information objects which acts according to 
policy. 



